Activity tracking events for IBM Cloud Metrics Routing

IBM Cloud services, such as IBM Cloud® Metrics Routing, generate activity tracking events.

Activity tracking events report on activities that change the state of a service in IBM Cloud. You can use the events to investigate abnormal activity and critical actions and to comply with regulatory audit requirements.

You can use IBM Cloud Activity Tracker Event Routing, a platform service, to route auditing events in your account to destinations of your choice by configuring targets and routes that define where activity tracking events are sent. For more information, see About IBM Cloud Activity Tracker Event Routing.

You can use IBM Cloud Logs to visualize and alert on events that are generated in your account and routed by IBM Cloud Activity Tracker Event Routing to an IBM Cloud Logs instance.

Locations where activity tracking events are sent by IBM Cloud Activity Tracker Event Routing

IBM Cloud Metrics Routing sends activity tracking events by IBM Cloud Activity Tracker Event Routing in the regions that are indicated in the following table.

Regions where activity tracking events are sent in Americas locations
Dallas (`us-south`)	Washington (`us-east`)	Toronto (`ca-tor`)	Sao Paulo (`br-sao`)
Yes	Yes	Yes	Yes

Regions where activity tracking events are sent in Asia Pacific locations
Tokyo (`jp-tok`)	Sydney (`au-syd`)	Osaka (`jp-osa`)	Chennai (`in-che`)
Yes	Yes	Yes	No

Regions where activity tracking events are sent in Europe locations
Frankfurt (`eu-de`)	London (`eu-gb`)	Madrid (`eu-es`)
Yes	Yes	Yes

Routing events using Activity Tracker Event Routing

Activity Tracker Event Routing routes events based on the location that is specified in the logSourceCRN field included in the event.

You can define a target, the resource where events are routed to, in any Activity Tracker Event Routing supported region. However, the target resource can be located in any region where that type of target is supported, in the same account or in a different account. For more information about supported targets, see Targets.

You can define rules to determine where auditing events are to be routed by configuring 1 or more routes in the account. You can define rules for managing global events and location-based events that are generated in regions where Activity Tracker Event Routing is supported. For more information, see supported regions.

To view events, you must access the target and download the object.

Viewing activity tracking events for IBM Cloud Metrics Routing

You can use IBM Cloud Logs to visualize and alert on events that are generated in your account and routed by IBM Cloud Activity Tracker Event Routing to an IBM Cloud Logs instance.

Launching IBM Cloud Logs from the Observability page

For information on launching the IBM Cloud Logs UI, see Launching the UI in the IBM Cloud Logs documentation.

Management events

Targets

The following table lists the auditing events that are generated when you manage targets:

Events for managing targets
Action	Description
`metrics-router.target.create`	This event is generated when an administrator creates a new Monitoring target.
`metrics-router.target.list`	This event is generated when an administrator lists all targets defined under a region.
`metrics-router.target.read`	This event is generated when an administrator retrieves a target and its details by specifying the ID of the target.
`metrics-router.target.update`	This event is generated when an administrator updates a target details by specifying the ID of the target.
`metrics-router.target.delete`	This event is generated when an administrator deletes a target by specifying the ID of the target.

Routes

The following table lists the auditing events that are generated when you manage routes:

Events for managing routes
Action	Description
`metrics-router.route.create`	This event is generated when an administrator creates a route with rules that define how to route metrics data to targets.
`metrics-router.route.list`	This event is generated when an administrator lists routes.
`metrics-router.route.read`	This event is generated when an administrator retrieves a route and its details by specifying the ID of the route.
`metrics-router.route.update`	This event is generated when an administrator replaces a route details by specifying the ID of the route. You can also get this event when you validate a target by checking the credentials to the destination target.
`metrics-router.route.delete`	This event is generated when an administrator deletes a route by specifying the ID of the route.

Settings

The following table lists the auditing events that are generated when you manage settings:

Events for managing settings
Action	Description
`metrics-router.setting.update`	This event is generated when an administrator configures the IBM Cloud Metrics Routing settings for an account.
`metrics-router.setting.get`	This event is generated when an administrator gets information about the IBM Cloud Metrics Routing settings for an account.